Re: [sidr] revision to draft-ietf-sidr-roa-validation

[Rob Austein <sra at isc.org>]

At Sun, 2 Aug 2009 19:56:08 -0700, Terry Manderson wrote:
> 
> It is truly a regrettable situation that the workgroup has been
> lulled into this position.

Kindly tone down the rhetoric.

> A ROA that has an implicit deny creates a major break scenario since
> the RPKI system will be in partial deployment for many years, - the
> resulting requirement is that every LIR's customers MUST participate
> in RPKI else the issuance of the LIR's ROA will invalidate all
> customer announcements in the examples provided by Geoff.

No, the LIR just has to issue ROAs for any of its customers that are
unwilling or unable to generate their own.  The LIR has to know what
resources each of its children has and which of its children are
RPKI-capable in any case, the rest is a small matter of programming.

This has been covered on the mailing list and in presentations to the
WG: see, eg, Randy's slides from the Stockholm meeting just last week.